GIT Revision: 33005df2adba105219876771cda1c040584bc91c

GIT Branch: SLE15-SP6-LTSS 2025-12-24 00:42:05 +0000
Add IGNORE-KABI-BADNESS
2025-12-24 08:03:21 +01:00 · 2025-12-23 08:01:56 +01:00 · 2025-12-23 08:01:55 +01:00 · 2025-12-22 08:12:38 +01:00 · 2025-12-22 08:12:37 +01:00 · 2025-12-21 08:14:01 +01:00
30 changed files with 768 additions and 32 deletions
--- a/dtb-aarch64.changes
+++ b/dtb-aarch64.changes
@@ -1,3 +1,59 @@
+-------------------------------------------------------------------
+Tue Dec 23 06:59:48 CET 2025 - heming.zhao@suse.com
+
+- gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242
+  bsc#1255075).
+- commit c371711
+
+-------------------------------------------------------------------
+Mon Dec 22 12:00:00 CET 2025 - fmancera@suse.de
+
+- sctp: Prevent TOCTOU out-of-bounds write (CVE-2025-40331
+  bsc#1254615).
+- commit a261090
+
+-------------------------------------------------------------------
+Mon Dec 22 11:27:57 CET 2025 - fmancera@suse.de
+
+- net: bridge: fix use-after-free due to MST port state bypass
+  (CVE-2025-40297 bsc#1255187).
+- commit 551613c
+
+-------------------------------------------------------------------
+Sun Dec 21 15:10:56 CET 2025 - heming.zhao@suse.com
+
+- ocfs2: clear extent cache after moving/defragmenting extents
+  (CVE-2025-40233 bsc#1254813).
+- commit 2e6aaae
+
+-------------------------------------------------------------------
+Fri Dec 19 17:29:04 CET 2025 - fmancera@suse.de
+
+- tipc: Fix use-after-free in tipc_mon_reinit_self()
+  (CVE-2025-40280 bsc#1254847).
+- commit 293c735
+
+-------------------------------------------------------------------
+Thu Dec 18 14:42:30 CET 2025 - fmancera@suse.de
+
+- xfrm: also call xfrm_state_delete_tunnel at destroy time for
+  states that were never added (CVE-2025-40215 bsc#1254959).
+- commit ae22a6c
+
+-------------------------------------------------------------------
+Thu Dec 18 14:37:52 CET 2025 - fmancera@suse.de
+
+- xfrm: delete x->tunnel as we delete x (CVE-2025-40215
+  bsc#1254959).
+- commit 13f0f1f
+
+-------------------------------------------------------------------
+Thu Dec 18 12:18:16 CET 2025 - fmancera@suse.de
+
+- kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959
+  CVE-2025-40215).
+- commit 63a872c
+
 -------------------------------------------------------------------
 Tue Dec 16 14:16:00 CET 2025 - tiwai@suse.de

--- a/dtb-aarch64.spec
+++ b/dtb-aarch64.spec
@@ -27,7 +27,7 @@
 Name:           dtb-aarch64
 Version:        6.4.0
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb9011f6
+Release:        <RELEASE>.g33005df
 %else
 Release:        0
 %endif
--- a/dtb-armv7l.changes
+++ b/dtb-armv7l.changes
@@ -1,3 +1,59 @@
+-------------------------------------------------------------------
+Tue Dec 23 06:59:48 CET 2025 - heming.zhao@suse.com
+
+- gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242
+  bsc#1255075).
+- commit c371711
+
+-------------------------------------------------------------------
+Mon Dec 22 12:00:00 CET 2025 - fmancera@suse.de
+
+- sctp: Prevent TOCTOU out-of-bounds write (CVE-2025-40331
+  bsc#1254615).
+- commit a261090
+
+-------------------------------------------------------------------
+Mon Dec 22 11:27:57 CET 2025 - fmancera@suse.de
+
+- net: bridge: fix use-after-free due to MST port state bypass
+  (CVE-2025-40297 bsc#1255187).
+- commit 551613c
+
+-------------------------------------------------------------------
+Sun Dec 21 15:10:56 CET 2025 - heming.zhao@suse.com
+
+- ocfs2: clear extent cache after moving/defragmenting extents
+  (CVE-2025-40233 bsc#1254813).
+- commit 2e6aaae
+
+-------------------------------------------------------------------
+Fri Dec 19 17:29:04 CET 2025 - fmancera@suse.de
+
+- tipc: Fix use-after-free in tipc_mon_reinit_self()
+  (CVE-2025-40280 bsc#1254847).
+- commit 293c735
+
+-------------------------------------------------------------------
+Thu Dec 18 14:42:30 CET 2025 - fmancera@suse.de
+
+- xfrm: also call xfrm_state_delete_tunnel at destroy time for
+  states that were never added (CVE-2025-40215 bsc#1254959).
+- commit ae22a6c
+
+-------------------------------------------------------------------
+Thu Dec 18 14:37:52 CET 2025 - fmancera@suse.de
+
+- xfrm: delete x->tunnel as we delete x (CVE-2025-40215
+  bsc#1254959).
+- commit 13f0f1f
+
+-------------------------------------------------------------------
+Thu Dec 18 12:18:16 CET 2025 - fmancera@suse.de
+
+- kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959
+  CVE-2025-40215).
+- commit 63a872c
+
 -------------------------------------------------------------------
 Tue Dec 16 14:16:00 CET 2025 - tiwai@suse.de

--- a/dtb-armv7l.spec
+++ b/dtb-armv7l.spec
@@ -27,7 +27,7 @@
 Name:           dtb-armv7l
 Version:        6.4.0
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb9011f6
+Release:        <RELEASE>.g33005df
 %else
 Release:        0
 %endif
--- a/kernel-64kb.changes
+++ b/kernel-64kb.changes
@@ -1,3 +1,59 @@
+-------------------------------------------------------------------
+Tue Dec 23 06:59:48 CET 2025 - heming.zhao@suse.com
+
+- gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242
+  bsc#1255075).
+- commit c371711
+
+-------------------------------------------------------------------
+Mon Dec 22 12:00:00 CET 2025 - fmancera@suse.de
+
+- sctp: Prevent TOCTOU out-of-bounds write (CVE-2025-40331
+  bsc#1254615).
+- commit a261090
+
+-------------------------------------------------------------------
+Mon Dec 22 11:27:57 CET 2025 - fmancera@suse.de
+
+- net: bridge: fix use-after-free due to MST port state bypass
+  (CVE-2025-40297 bsc#1255187).
+- commit 551613c
+
+-------------------------------------------------------------------
+Sun Dec 21 15:10:56 CET 2025 - heming.zhao@suse.com
+
+- ocfs2: clear extent cache after moving/defragmenting extents
+  (CVE-2025-40233 bsc#1254813).
+- commit 2e6aaae
+
+-------------------------------------------------------------------
+Fri Dec 19 17:29:04 CET 2025 - fmancera@suse.de
+
+- tipc: Fix use-after-free in tipc_mon_reinit_self()
+  (CVE-2025-40280 bsc#1254847).
+- commit 293c735
+
+-------------------------------------------------------------------
+Thu Dec 18 14:42:30 CET 2025 - fmancera@suse.de
+
+- xfrm: also call xfrm_state_delete_tunnel at destroy time for
+  states that were never added (CVE-2025-40215 bsc#1254959).
+- commit ae22a6c
+
+-------------------------------------------------------------------
+Thu Dec 18 14:37:52 CET 2025 - fmancera@suse.de
+
+- xfrm: delete x->tunnel as we delete x (CVE-2025-40215
+  bsc#1254959).
+- commit 13f0f1f
+
+-------------------------------------------------------------------
+Thu Dec 18 12:18:16 CET 2025 - fmancera@suse.de
+
+- kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959
+  CVE-2025-40215).
+- commit 63a872c
+
 -------------------------------------------------------------------
 Tue Dec 16 14:16:00 CET 2025 - tiwai@suse.de

--- a/kernel-64kb.spec
+++ b/kernel-64kb.spec
@@ -19,7 +19,7 @@

 %define srcversion 6.4
 %define patchversion 6.4.0
-%define git_commit b9011f698cf0e8b3578d6469ed96d24d5d6776e9
+%define git_commit 33005df2adba105219876771cda1c040584bc91c
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux gz
@@ -42,7 +42,7 @@
 Name:           kernel-64kb
 Version:        6.4.0
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb9011f6
+Release:        <RELEASE>.g33005df
 %else
 Release:        0
 %endif
--- a/kernel-debug.changes
+++ b/kernel-debug.changes
@@ -1,3 +1,59 @@
+-------------------------------------------------------------------
+Tue Dec 23 06:59:48 CET 2025 - heming.zhao@suse.com
+
+- gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242
+  bsc#1255075).
+- commit c371711
+
+-------------------------------------------------------------------
+Mon Dec 22 12:00:00 CET 2025 - fmancera@suse.de
+
+- sctp: Prevent TOCTOU out-of-bounds write (CVE-2025-40331
+  bsc#1254615).
+- commit a261090
+
+-------------------------------------------------------------------
+Mon Dec 22 11:27:57 CET 2025 - fmancera@suse.de
+
+- net: bridge: fix use-after-free due to MST port state bypass
+  (CVE-2025-40297 bsc#1255187).
+- commit 551613c
+
+-------------------------------------------------------------------
+Sun Dec 21 15:10:56 CET 2025 - heming.zhao@suse.com
+
+- ocfs2: clear extent cache after moving/defragmenting extents
+  (CVE-2025-40233 bsc#1254813).
+- commit 2e6aaae
+
+-------------------------------------------------------------------
+Fri Dec 19 17:29:04 CET 2025 - fmancera@suse.de
+
+- tipc: Fix use-after-free in tipc_mon_reinit_self()
+  (CVE-2025-40280 bsc#1254847).
+- commit 293c735
+
+-------------------------------------------------------------------
+Thu Dec 18 14:42:30 CET 2025 - fmancera@suse.de
+
+- xfrm: also call xfrm_state_delete_tunnel at destroy time for
+  states that were never added (CVE-2025-40215 bsc#1254959).
+- commit ae22a6c
+
+-------------------------------------------------------------------
+Thu Dec 18 14:37:52 CET 2025 - fmancera@suse.de
+
+- xfrm: delete x->tunnel as we delete x (CVE-2025-40215
+  bsc#1254959).
+- commit 13f0f1f
+
+-------------------------------------------------------------------
+Thu Dec 18 12:18:16 CET 2025 - fmancera@suse.de
+
+- kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959
+  CVE-2025-40215).
+- commit 63a872c
+
 -------------------------------------------------------------------
 Tue Dec 16 14:16:00 CET 2025 - tiwai@suse.de

--- a/kernel-debug.spec
+++ b/kernel-debug.spec
@@ -19,7 +19,7 @@

 %define srcversion 6.4
 %define patchversion 6.4.0
-%define git_commit b9011f698cf0e8b3578d6469ed96d24d5d6776e9
+%define git_commit 33005df2adba105219876771cda1c040584bc91c
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux gz
@@ -42,7 +42,7 @@
 Name:           kernel-debug
 Version:        6.4.0
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb9011f6
+Release:        <RELEASE>.g33005df
 %else
 Release:        0
 %endif
--- a/kernel-default.changes
+++ b/kernel-default.changes
@@ -1,3 +1,59 @@
+-------------------------------------------------------------------
+Tue Dec 23 06:59:48 CET 2025 - heming.zhao@suse.com
+
+- gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242
+  bsc#1255075).
+- commit c371711
+
+-------------------------------------------------------------------
+Mon Dec 22 12:00:00 CET 2025 - fmancera@suse.de
+
+- sctp: Prevent TOCTOU out-of-bounds write (CVE-2025-40331
+  bsc#1254615).
+- commit a261090
+
+-------------------------------------------------------------------
+Mon Dec 22 11:27:57 CET 2025 - fmancera@suse.de
+
+- net: bridge: fix use-after-free due to MST port state bypass
+  (CVE-2025-40297 bsc#1255187).
+- commit 551613c
+
+-------------------------------------------------------------------
+Sun Dec 21 15:10:56 CET 2025 - heming.zhao@suse.com
+
+- ocfs2: clear extent cache after moving/defragmenting extents
+  (CVE-2025-40233 bsc#1254813).
+- commit 2e6aaae
+
+-------------------------------------------------------------------
+Fri Dec 19 17:29:04 CET 2025 - fmancera@suse.de
+
+- tipc: Fix use-after-free in tipc_mon_reinit_self()
+  (CVE-2025-40280 bsc#1254847).
+- commit 293c735
+
+-------------------------------------------------------------------
+Thu Dec 18 14:42:30 CET 2025 - fmancera@suse.de
+
+- xfrm: also call xfrm_state_delete_tunnel at destroy time for
+  states that were never added (CVE-2025-40215 bsc#1254959).
+- commit ae22a6c
+
+-------------------------------------------------------------------
+Thu Dec 18 14:37:52 CET 2025 - fmancera@suse.de
+
+- xfrm: delete x->tunnel as we delete x (CVE-2025-40215
+  bsc#1254959).
+- commit 13f0f1f
+
+-------------------------------------------------------------------
+Thu Dec 18 12:18:16 CET 2025 - fmancera@suse.de
+
+- kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959
+  CVE-2025-40215).
+- commit 63a872c
+
 -------------------------------------------------------------------
 Tue Dec 16 14:16:00 CET 2025 - tiwai@suse.de

--- a/kernel-default.spec
+++ b/kernel-default.spec
@@ -19,7 +19,7 @@

 %define srcversion 6.4
 %define patchversion 6.4.0
-%define git_commit b9011f698cf0e8b3578d6469ed96d24d5d6776e9
+%define git_commit 33005df2adba105219876771cda1c040584bc91c
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux gz
@@ -42,7 +42,7 @@
 Name:           kernel-default
 Version:        6.4.0
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb9011f6
+Release:        <RELEASE>.g33005df
 %else
 Release:        0
 %endif
--- a/kernel-docs.changes
+++ b/kernel-docs.changes
@@ -1,3 +1,59 @@
+-------------------------------------------------------------------
+Tue Dec 23 06:59:48 CET 2025 - heming.zhao@suse.com
+
+- gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242
+  bsc#1255075).
+- commit c371711
+
+-------------------------------------------------------------------
+Mon Dec 22 12:00:00 CET 2025 - fmancera@suse.de
+
+- sctp: Prevent TOCTOU out-of-bounds write (CVE-2025-40331
+  bsc#1254615).
+- commit a261090
+
+-------------------------------------------------------------------
+Mon Dec 22 11:27:57 CET 2025 - fmancera@suse.de
+
+- net: bridge: fix use-after-free due to MST port state bypass
+  (CVE-2025-40297 bsc#1255187).
+- commit 551613c
+
+-------------------------------------------------------------------
+Sun Dec 21 15:10:56 CET 2025 - heming.zhao@suse.com
+
+- ocfs2: clear extent cache after moving/defragmenting extents
+  (CVE-2025-40233 bsc#1254813).
+- commit 2e6aaae
+
+-------------------------------------------------------------------
+Fri Dec 19 17:29:04 CET 2025 - fmancera@suse.de
+
+- tipc: Fix use-after-free in tipc_mon_reinit_self()
+  (CVE-2025-40280 bsc#1254847).
+- commit 293c735
+
+-------------------------------------------------------------------
+Thu Dec 18 14:42:30 CET 2025 - fmancera@suse.de
+
+- xfrm: also call xfrm_state_delete_tunnel at destroy time for
+  states that were never added (CVE-2025-40215 bsc#1254959).
+- commit ae22a6c
+
+-------------------------------------------------------------------
+Thu Dec 18 14:37:52 CET 2025 - fmancera@suse.de
+
+- xfrm: delete x->tunnel as we delete x (CVE-2025-40215
+  bsc#1254959).
+- commit 13f0f1f
+
+-------------------------------------------------------------------
+Thu Dec 18 12:18:16 CET 2025 - fmancera@suse.de
+
+- kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959
+  CVE-2025-40215).
+- commit 63a872c
+
 -------------------------------------------------------------------
 Tue Dec 16 14:16:00 CET 2025 - tiwai@suse.de

--- a/kernel-docs.spec
+++ b/kernel-docs.spec
@@ -18,7 +18,7 @@

 %define srcversion 6.4
 %define patchversion 6.4.0
-%define git_commit b9011f698cf0e8b3578d6469ed96d24d5d6776e9
+%define git_commit 33005df2adba105219876771cda1c040584bc91c
 %define variant %{nil}
 %define build_html 1
 %define build_pdf 0
@@ -30,7 +30,7 @@
 Name:           kernel-docs
 Version:        6.4.0
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb9011f6
+Release:        <RELEASE>.g33005df
 %else
 Release:        0
 %endif
--- a/kernel-kvmsmall.changes
+++ b/kernel-kvmsmall.changes
@@ -1,3 +1,59 @@
+-------------------------------------------------------------------
+Tue Dec 23 06:59:48 CET 2025 - heming.zhao@suse.com
+
+- gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242
+  bsc#1255075).
+- commit c371711
+
+-------------------------------------------------------------------
+Mon Dec 22 12:00:00 CET 2025 - fmancera@suse.de
+
+- sctp: Prevent TOCTOU out-of-bounds write (CVE-2025-40331
+  bsc#1254615).
+- commit a261090
+
+-------------------------------------------------------------------
+Mon Dec 22 11:27:57 CET 2025 - fmancera@suse.de
+
+- net: bridge: fix use-after-free due to MST port state bypass
+  (CVE-2025-40297 bsc#1255187).
+- commit 551613c
+
+-------------------------------------------------------------------
+Sun Dec 21 15:10:56 CET 2025 - heming.zhao@suse.com
+
+- ocfs2: clear extent cache after moving/defragmenting extents
+  (CVE-2025-40233 bsc#1254813).
+- commit 2e6aaae
+
+-------------------------------------------------------------------
+Fri Dec 19 17:29:04 CET 2025 - fmancera@suse.de
+
+- tipc: Fix use-after-free in tipc_mon_reinit_self()
+  (CVE-2025-40280 bsc#1254847).
+- commit 293c735
+
+-------------------------------------------------------------------
+Thu Dec 18 14:42:30 CET 2025 - fmancera@suse.de
+
+- xfrm: also call xfrm_state_delete_tunnel at destroy time for
+  states that were never added (CVE-2025-40215 bsc#1254959).
+- commit ae22a6c
+
+-------------------------------------------------------------------
+Thu Dec 18 14:37:52 CET 2025 - fmancera@suse.de
+
+- xfrm: delete x->tunnel as we delete x (CVE-2025-40215
+  bsc#1254959).
+- commit 13f0f1f
+
+-------------------------------------------------------------------
+Thu Dec 18 12:18:16 CET 2025 - fmancera@suse.de
+
+- kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959
+  CVE-2025-40215).
+- commit 63a872c
+
 -------------------------------------------------------------------
 Tue Dec 16 14:16:00 CET 2025 - tiwai@suse.de

--- a/kernel-kvmsmall.spec
+++ b/kernel-kvmsmall.spec
@@ -19,7 +19,7 @@

 %define srcversion 6.4
 %define patchversion 6.4.0
-%define git_commit b9011f698cf0e8b3578d6469ed96d24d5d6776e9
+%define git_commit 33005df2adba105219876771cda1c040584bc91c
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux gz
@@ -42,7 +42,7 @@
 Name:           kernel-kvmsmall
 Version:        6.4.0
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb9011f6
+Release:        <RELEASE>.g33005df
 %else
 Release:        0
 %endif
--- a/kernel-lpae.changes
+++ b/kernel-lpae.changes
@@ -1,3 +1,59 @@
+-------------------------------------------------------------------
+Tue Dec 23 06:59:48 CET 2025 - heming.zhao@suse.com
+
+- gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242
+  bsc#1255075).
+- commit c371711
+
+-------------------------------------------------------------------
+Mon Dec 22 12:00:00 CET 2025 - fmancera@suse.de
+
+- sctp: Prevent TOCTOU out-of-bounds write (CVE-2025-40331
+  bsc#1254615).
+- commit a261090
+
+-------------------------------------------------------------------
+Mon Dec 22 11:27:57 CET 2025 - fmancera@suse.de
+
+- net: bridge: fix use-after-free due to MST port state bypass
+  (CVE-2025-40297 bsc#1255187).
+- commit 551613c
+
+-------------------------------------------------------------------
+Sun Dec 21 15:10:56 CET 2025 - heming.zhao@suse.com
+
+- ocfs2: clear extent cache after moving/defragmenting extents
+  (CVE-2025-40233 bsc#1254813).
+- commit 2e6aaae
+
+-------------------------------------------------------------------
+Fri Dec 19 17:29:04 CET 2025 - fmancera@suse.de
+
+- tipc: Fix use-after-free in tipc_mon_reinit_self()
+  (CVE-2025-40280 bsc#1254847).
+- commit 293c735
+
+-------------------------------------------------------------------
+Thu Dec 18 14:42:30 CET 2025 - fmancera@suse.de
+
+- xfrm: also call xfrm_state_delete_tunnel at destroy time for
+  states that were never added (CVE-2025-40215 bsc#1254959).
+- commit ae22a6c
+
+-------------------------------------------------------------------
+Thu Dec 18 14:37:52 CET 2025 - fmancera@suse.de
+
+- xfrm: delete x->tunnel as we delete x (CVE-2025-40215
+  bsc#1254959).
+- commit 13f0f1f
+
+-------------------------------------------------------------------
+Thu Dec 18 12:18:16 CET 2025 - fmancera@suse.de
+
+- kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959
+  CVE-2025-40215).
+- commit 63a872c
+
 -------------------------------------------------------------------
 Tue Dec 16 14:16:00 CET 2025 - tiwai@suse.de

--- a/kernel-lpae.spec
+++ b/kernel-lpae.spec
@@ -19,7 +19,7 @@

 %define srcversion 6.4
 %define patchversion 6.4.0
-%define git_commit b9011f698cf0e8b3578d6469ed96d24d5d6776e9
+%define git_commit 33005df2adba105219876771cda1c040584bc91c
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux gz
@@ -42,7 +42,7 @@
 Name:           kernel-lpae
 Version:        6.4.0
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb9011f6
+Release:        <RELEASE>.g33005df
 %else
 Release:        0
 %endif
--- a/kernel-obs-build.changes
+++ b/kernel-obs-build.changes
@@ -1,3 +1,59 @@
+-------------------------------------------------------------------
+Tue Dec 23 06:59:48 CET 2025 - heming.zhao@suse.com
+
+- gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242
+  bsc#1255075).
+- commit c371711
+
+-------------------------------------------------------------------
+Mon Dec 22 12:00:00 CET 2025 - fmancera@suse.de
+
+- sctp: Prevent TOCTOU out-of-bounds write (CVE-2025-40331
+  bsc#1254615).
+- commit a261090
+
+-------------------------------------------------------------------
+Mon Dec 22 11:27:57 CET 2025 - fmancera@suse.de
+
+- net: bridge: fix use-after-free due to MST port state bypass
+  (CVE-2025-40297 bsc#1255187).
+- commit 551613c
+
+-------------------------------------------------------------------
+Sun Dec 21 15:10:56 CET 2025 - heming.zhao@suse.com
+
+- ocfs2: clear extent cache after moving/defragmenting extents
+  (CVE-2025-40233 bsc#1254813).
+- commit 2e6aaae
+
+-------------------------------------------------------------------
+Fri Dec 19 17:29:04 CET 2025 - fmancera@suse.de
+
+- tipc: Fix use-after-free in tipc_mon_reinit_self()
+  (CVE-2025-40280 bsc#1254847).
+- commit 293c735
+
+-------------------------------------------------------------------
+Thu Dec 18 14:42:30 CET 2025 - fmancera@suse.de
+
+- xfrm: also call xfrm_state_delete_tunnel at destroy time for
+  states that were never added (CVE-2025-40215 bsc#1254959).
+- commit ae22a6c
+
+-------------------------------------------------------------------
+Thu Dec 18 14:37:52 CET 2025 - fmancera@suse.de
+
+- xfrm: delete x->tunnel as we delete x (CVE-2025-40215
+  bsc#1254959).
+- commit 13f0f1f
+
+-------------------------------------------------------------------
+Thu Dec 18 12:18:16 CET 2025 - fmancera@suse.de
+
+- kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959
+  CVE-2025-40215).
+- commit 63a872c
+
 -------------------------------------------------------------------
 Tue Dec 16 14:16:00 CET 2025 - tiwai@suse.de

--- a/kernel-obs-build.spec
+++ b/kernel-obs-build.spec
@@ -38,7 +38,7 @@
 %endif
 %endif
 %endif
-%global kernel_package kernel%kernel_flavor-srchash-b9011f698cf0e8b3578d6469ed96d24d5d6776e9
+%global kernel_package kernel%kernel_flavor-srchash-33005df2adba105219876771cda1c040584bc91c
 %endif
 %if 0%{?rhel_version}
 %global kernel_package kernel
@@ -47,14 +47,14 @@
 Name:           kernel-obs-build
 Version:        6.4.0
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb9011f6
+Release:        <RELEASE>.g33005df
 %else
 Release:        0
 %endif
 Summary:        package kernel and initrd for OBS VM builds
 License:        GPL-2.0-only
 Group:          SLES
-Provides:       kernel-obs-build-srchash-b9011f698cf0e8b3578d6469ed96d24d5d6776e9
+Provides:       kernel-obs-build-srchash-33005df2adba105219876771cda1c040584bc91c
 BuildRequires:  coreutils
 BuildRequires:  device-mapper
 BuildRequires:  dracut
--- a/kernel-obs-qa.changes
+++ b/kernel-obs-qa.changes
@@ -1,3 +1,59 @@
+-------------------------------------------------------------------
+Tue Dec 23 06:59:48 CET 2025 - heming.zhao@suse.com
+
+- gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242
+  bsc#1255075).
+- commit c371711
+
+-------------------------------------------------------------------
+Mon Dec 22 12:00:00 CET 2025 - fmancera@suse.de
+
+- sctp: Prevent TOCTOU out-of-bounds write (CVE-2025-40331
+  bsc#1254615).
+- commit a261090
+
+-------------------------------------------------------------------
+Mon Dec 22 11:27:57 CET 2025 - fmancera@suse.de
+
+- net: bridge: fix use-after-free due to MST port state bypass
+  (CVE-2025-40297 bsc#1255187).
+- commit 551613c
+
+-------------------------------------------------------------------
+Sun Dec 21 15:10:56 CET 2025 - heming.zhao@suse.com
+
+- ocfs2: clear extent cache after moving/defragmenting extents
+  (CVE-2025-40233 bsc#1254813).
+- commit 2e6aaae
+
+-------------------------------------------------------------------
+Fri Dec 19 17:29:04 CET 2025 - fmancera@suse.de
+
+- tipc: Fix use-after-free in tipc_mon_reinit_self()
+  (CVE-2025-40280 bsc#1254847).
+- commit 293c735
+
+-------------------------------------------------------------------
+Thu Dec 18 14:42:30 CET 2025 - fmancera@suse.de
+
+- xfrm: also call xfrm_state_delete_tunnel at destroy time for
+  states that were never added (CVE-2025-40215 bsc#1254959).
+- commit ae22a6c
+
+-------------------------------------------------------------------
+Thu Dec 18 14:37:52 CET 2025 - fmancera@suse.de
+
+- xfrm: delete x->tunnel as we delete x (CVE-2025-40215
+  bsc#1254959).
+- commit 13f0f1f
+
+-------------------------------------------------------------------
+Thu Dec 18 12:18:16 CET 2025 - fmancera@suse.de
+
+- kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959
+  CVE-2025-40215).
+- commit 63a872c
+
 -------------------------------------------------------------------
 Tue Dec 16 14:16:00 CET 2025 - tiwai@suse.de

--- a/kernel-obs-qa.spec
+++ b/kernel-obs-qa.spec
@@ -25,7 +25,7 @@
 Name:           kernel-obs-qa
 Version:        6.4.0
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb9011f6
+Release:        <RELEASE>.g33005df
 %else
 Release:        0
 %endif
@@ -36,7 +36,7 @@ BuildRequires:  kernel-default
 # kernel-obs-build must be also configured as VMinstall, but is required
 # here as well to avoid that qa and build package build parallel
 %if ! 0%{?qemu_user_space_build}
-BuildRequires:  kernel-obs-build-srchash-b9011f698cf0e8b3578d6469ed96d24d5d6776e9
+BuildRequires:  kernel-obs-build-srchash-33005df2adba105219876771cda1c040584bc91c
 %endif
 BuildRequires:  modutils
 ExclusiveArch:  aarch64 armv7hl ppc64le s390x x86_64
--- a/kernel-source.changes
+++ b/kernel-source.changes
@@ -1,3 +1,59 @@
+-------------------------------------------------------------------
+Tue Dec 23 06:59:48 CET 2025 - heming.zhao@suse.com
+
+- gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242
+  bsc#1255075).
+- commit c371711
+
+-------------------------------------------------------------------
+Mon Dec 22 12:00:00 CET 2025 - fmancera@suse.de
+
+- sctp: Prevent TOCTOU out-of-bounds write (CVE-2025-40331
+  bsc#1254615).
+- commit a261090
+
+-------------------------------------------------------------------
+Mon Dec 22 11:27:57 CET 2025 - fmancera@suse.de
+
+- net: bridge: fix use-after-free due to MST port state bypass
+  (CVE-2025-40297 bsc#1255187).
+- commit 551613c
+
+-------------------------------------------------------------------
+Sun Dec 21 15:10:56 CET 2025 - heming.zhao@suse.com
+
+- ocfs2: clear extent cache after moving/defragmenting extents
+  (CVE-2025-40233 bsc#1254813).
+- commit 2e6aaae
+
+-------------------------------------------------------------------
+Fri Dec 19 17:29:04 CET 2025 - fmancera@suse.de
+
+- tipc: Fix use-after-free in tipc_mon_reinit_self()
+  (CVE-2025-40280 bsc#1254847).
+- commit 293c735
+
+-------------------------------------------------------------------
+Thu Dec 18 14:42:30 CET 2025 - fmancera@suse.de
+
+- xfrm: also call xfrm_state_delete_tunnel at destroy time for
+  states that were never added (CVE-2025-40215 bsc#1254959).
+- commit ae22a6c
+
+-------------------------------------------------------------------
+Thu Dec 18 14:37:52 CET 2025 - fmancera@suse.de
+
+- xfrm: delete x->tunnel as we delete x (CVE-2025-40215
+  bsc#1254959).
+- commit 13f0f1f
+
+-------------------------------------------------------------------
+Thu Dec 18 12:18:16 CET 2025 - fmancera@suse.de
+
+- kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959
+  CVE-2025-40215).
+- commit 63a872c
+
 -------------------------------------------------------------------
 Tue Dec 16 14:16:00 CET 2025 - tiwai@suse.de

--- a/kernel-source.spec
+++ b/kernel-source.spec
@@ -18,7 +18,7 @@

 %define srcversion 6.4
 %define patchversion 6.4.0
-%define git_commit b9011f698cf0e8b3578d6469ed96d24d5d6776e9
+%define git_commit 33005df2adba105219876771cda1c040584bc91c
 %define variant %{nil}
 %define gcc_package gcc
 %define gcc_compiler gcc
@@ -30,7 +30,7 @@
 Name:           kernel-source
 Version:        6.4.0
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb9011f6
+Release:        <RELEASE>.g33005df
 %else
 Release:        0
 %endif
--- a/kernel-syms.changes
+++ b/kernel-syms.changes
@@ -1,3 +1,59 @@
+-------------------------------------------------------------------
+Tue Dec 23 06:59:48 CET 2025 - heming.zhao@suse.com
+
+- gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242
+  bsc#1255075).
+- commit c371711
+
+-------------------------------------------------------------------
+Mon Dec 22 12:00:00 CET 2025 - fmancera@suse.de
+
+- sctp: Prevent TOCTOU out-of-bounds write (CVE-2025-40331
+  bsc#1254615).
+- commit a261090
+
+-------------------------------------------------------------------
+Mon Dec 22 11:27:57 CET 2025 - fmancera@suse.de
+
+- net: bridge: fix use-after-free due to MST port state bypass
+  (CVE-2025-40297 bsc#1255187).
+- commit 551613c
+
+-------------------------------------------------------------------
+Sun Dec 21 15:10:56 CET 2025 - heming.zhao@suse.com
+
+- ocfs2: clear extent cache after moving/defragmenting extents
+  (CVE-2025-40233 bsc#1254813).
+- commit 2e6aaae
+
+-------------------------------------------------------------------
+Fri Dec 19 17:29:04 CET 2025 - fmancera@suse.de
+
+- tipc: Fix use-after-free in tipc_mon_reinit_self()
+  (CVE-2025-40280 bsc#1254847).
+- commit 293c735
+
+-------------------------------------------------------------------
+Thu Dec 18 14:42:30 CET 2025 - fmancera@suse.de
+
+- xfrm: also call xfrm_state_delete_tunnel at destroy time for
+  states that were never added (CVE-2025-40215 bsc#1254959).
+- commit ae22a6c
+
+-------------------------------------------------------------------
+Thu Dec 18 14:37:52 CET 2025 - fmancera@suse.de
+
+- xfrm: delete x->tunnel as we delete x (CVE-2025-40215
+  bsc#1254959).
+- commit 13f0f1f
+
+-------------------------------------------------------------------
+Thu Dec 18 12:18:16 CET 2025 - fmancera@suse.de
+
+- kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959
+  CVE-2025-40215).
+- commit 63a872c
+
 -------------------------------------------------------------------
 Tue Dec 16 14:16:00 CET 2025 - tiwai@suse.de

--- a/kernel-syms.spec
+++ b/kernel-syms.spec
@@ -16,7 +16,7 @@
 #


-%define git_commit b9011f698cf0e8b3578d6469ed96d24d5d6776e9
+%define git_commit 33005df2adba105219876771cda1c040584bc91c
 %define variant %{nil}

 %include %_sourcedir/kernel-spec-macros
@@ -24,7 +24,7 @@
 Name:           kernel-syms
 Version:        6.4.0
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb9011f6
+Release:        <RELEASE>.g33005df
 %else
 Release:        0
 %endif
--- a/kernel-zfcpdump.changes
+++ b/kernel-zfcpdump.changes
@@ -1,3 +1,59 @@
+-------------------------------------------------------------------
+Tue Dec 23 06:59:48 CET 2025 - heming.zhao@suse.com
+
+- gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242
+  bsc#1255075).
+- commit c371711
+
+-------------------------------------------------------------------
+Mon Dec 22 12:00:00 CET 2025 - fmancera@suse.de
+
+- sctp: Prevent TOCTOU out-of-bounds write (CVE-2025-40331
+  bsc#1254615).
+- commit a261090
+
+-------------------------------------------------------------------
+Mon Dec 22 11:27:57 CET 2025 - fmancera@suse.de
+
+- net: bridge: fix use-after-free due to MST port state bypass
+  (CVE-2025-40297 bsc#1255187).
+- commit 551613c
+
+-------------------------------------------------------------------
+Sun Dec 21 15:10:56 CET 2025 - heming.zhao@suse.com
+
+- ocfs2: clear extent cache after moving/defragmenting extents
+  (CVE-2025-40233 bsc#1254813).
+- commit 2e6aaae
+
+-------------------------------------------------------------------
+Fri Dec 19 17:29:04 CET 2025 - fmancera@suse.de
+
+- tipc: Fix use-after-free in tipc_mon_reinit_self()
+  (CVE-2025-40280 bsc#1254847).
+- commit 293c735
+
+-------------------------------------------------------------------
+Thu Dec 18 14:42:30 CET 2025 - fmancera@suse.de
+
+- xfrm: also call xfrm_state_delete_tunnel at destroy time for
+  states that were never added (CVE-2025-40215 bsc#1254959).
+- commit ae22a6c
+
+-------------------------------------------------------------------
+Thu Dec 18 14:37:52 CET 2025 - fmancera@suse.de
+
+- xfrm: delete x->tunnel as we delete x (CVE-2025-40215
+  bsc#1254959).
+- commit 13f0f1f
+
+-------------------------------------------------------------------
+Thu Dec 18 12:18:16 CET 2025 - fmancera@suse.de
+
+- kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959
+  CVE-2025-40215).
+- commit 63a872c
+
 -------------------------------------------------------------------
 Tue Dec 16 14:16:00 CET 2025 - tiwai@suse.de

--- a/kernel-zfcpdump.spec
+++ b/kernel-zfcpdump.spec
@@ -19,7 +19,7 @@

 %define srcversion 6.4
 %define patchversion 6.4.0
-%define git_commit b9011f698cf0e8b3578d6469ed96d24d5d6776e9
+%define git_commit 33005df2adba105219876771cda1c040584bc91c
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux gz
@@ -42,7 +42,7 @@
 Name:           kernel-zfcpdump
 Version:        6.4.0
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb9011f6
+Release:        <RELEASE>.g33005df
 %else
 Release:        0
 %endif
--- a/patches.kabi.tar.bz2
+++ b/patches.kabi.tar.bz2
--- a/patches.suse.tar.bz2
+++ b/patches.suse.tar.bz2
--- a/series.conf
+++ b/series.conf
@@ -33734,6 +33734,7 @@
 	patches.suse/can-netlink-can_changelink-fix-NULL-pointer-deref-of.patch
 	patches.suse/s390-ism-fix-concurrency-management-in-ism_cmd.patch
 	patches.suse/xfrm-interface-fix-use-after-free-after-changing-collect_m.patch
+	patches.suse/xfrm-delete-x-tunnel-as-we-delete-x.patch
 	patches.suse/arm64-entry-Mask-DAIF-in-cpu_switch_to-call_on_irq_stack.patch
 	patches.suse/ALSA-hda-realtek-Add-mute-LED-support-for-HP-Pavilio.patch
 	patches.suse/nilfs2-reject-invalid-file-types-when-reading-inodes.patch
@@ -34679,6 +34680,7 @@
 	patches.suse/writeback-Avoid-contention-on-wb-list_lock-when-swit.patch
 	patches.suse/writeback-Avoid-softlockup-when-switching-many-inode.patch
 	patches.suse/writeback-Avoid-excessively-long-inode-switching-tim.patch
+	patches.suse/gfs2-Fix-unlikely-race-in-gdlm_put_lock.patch
 	patches.suse/xfs-rename-the-old_crc-variable-in-xlog_recover_process.patch
 	patches.suse/hfsplus-return-EIO-when-type-of-hidden-directory-mismatch-in-hfsplus_fill_super.patch
 	patches.suse/hfs-validate-record-offset-in-hfsplus_bmap_alloc.patch
@@ -35172,6 +35174,7 @@
 	patches.suse/HID-quirks-avoid-Cooler-Master-MM712-dongle-wakeup-b.patch
 	patches.suse/HID-hid-input-only-ignore-0-battery-events-for-digit.patch
 	patches.suse/HID-multitouch-fix-name-of-Stylus-input-devices.patch
+	patches.suse/ocfs2-clear-extent-cache-after-moving-defragmenting-.patch
 	patches.suse/msft-hv-3361-scsi-storvsc-Prefer-returning-channel-with-the-same-.patch
 	patches.suse/scsi-libfc-Prevent-integer-overflow-in-fc_fcp_recv_data.patch
 	patches.suse/btrfs-send-fix-duplicated-rmdir-operations-when-usin.patch
@@ -35248,8 +35251,10 @@
 	patches.suse/Bluetooth-hci_event-validate-skb-length-for-unknown-.patch
 	patches.suse/Bluetooth-btrtl-Fix-memory-leak-in-rtlbt_parse_firmw.patch
 	patches.suse/isdn-mISDN-hfcsusb-fix-memory-leak-in-hfcsusb_probe.patch
+	patches.suse/sctp-Prevent-TOCTOU-out-of-bounds-write.patch
 	patches.suse/net-usb-qmi_wwan-initialize-MAC-header-offset-in-qmi.patch
 	patches.suse/wifi-mac80211_hwsim-Limit-destroy_on_close-radio-rem.patch
+	patches.suse/net-bridge-fix-use-after-free-due-to-MST-port-state-bypass.patch
 	patches.suse/lib-crypto-curve25519-hacl64-Fix-older-clang-KASAN-w.patch
 	patches.suse/ACPI-SBS-Fix-present-test-in-acpi_battery_read.patch
 	patches.suse/Documentation-ACPI-i2c-muxes-fix-I2C-device-referenc.patch
@@ -35271,6 +35276,7 @@
 	patches.suse/NFSD-Skip-close-replay-processing-if-XDR-encoding-fails.patch
 	patches.suse/NFSD-Never-cache-a-COMPOUND-when-the-SEQUENCE-operation-fails.patch
 	patches.suse/strparser-Fix-signed-unsigned-mismatch-bug.patch
+	patches.suse/tipc-Fix-use-after-free-in-tipc_mon_reinit_self.patch
 	patches.suse/Bluetooth-MGMT-cancel-mesh-send-timer-when-hdev-remo.patch
 	patches.suse/Bluetooth-btusb-reorder-cleanup-in-btusb_disconnect-.patch
 	patches.suse/Bluetooth-6lowpan-reset-link-local-header-on-ipv6-re.patch
@@ -35304,6 +35310,7 @@
 	patches.suse/HID-amd_sfh-Stop-sensor-before-starting.patch
 	patches.suse/HID-hid-ntrig-Prevent-memory-leak-in-ntrig_report_ve.patch
 	patches.suse/HID-uclogic-Fix-potential-memory-leak-in-error-path.patch
+	patches.suse/xfrm-also-call-xfrm_state_delete_tunnel-at-destroy-time-fo.patch
 	patches.suse/platform-x86-intel-speed_select_if-Convert-PCIBIOS_-.patch
 	patches.suse/drm-tegra-dc-Fix-reference-leak-in-tegra_dc_couple.patch
 	patches.suse/drm-tegra-Add-call-to-put_pid.patch
@@ -36161,6 +36168,7 @@
 	patches.kabi/kabi-fix-sch_qfq-Fix-null-deref-in-agg_dequeue.patch
 	patches.kabi/kabi-hide-dst_entry-dev_rcu.patch
 	patches.kabi/Bluetooth-HCI-Fix-tracking-of-advertisement-set-inst.patch
+	patches.kabi/kabi-xfrm-delete-x-tunnel-as-we-delete-x.patch

 	########################################################
 	# SLE15-SP3 OOT performance patches evaluated but left
--- a/6
+++ b/6
@@ -1,3 +1,3 @@
-2025-12-17 00:58:29 +0000
-GIT Revision: b9011f698cf0e8b3578d6469ed96d24d5d6776e9
-GIT Branch: SLE15-SP6
+2025-12-24 00:42:05 +0000
+GIT Revision: 33005df2adba105219876771cda1c040584bc91c
+GIT Branch: SLE15-SP6-LTSS
Author	SHA256	Message	Date
Kernel Bugs	cd42b8afa3	GIT Revision: 33005df2adba105219876771cda1c040584bc91c GIT Branch: SLE15-SP6-LTSS 2025-12-24 00:42:05 +0000	2025-12-24 08:03:21 +01:00
Kernel Bugs	a3e0107937	Add IGNORE-KABI-BADNESS	2025-12-23 08:01:56 +01:00
Kernel Bugs	f106003a6b	GIT Revision: b59af1112963bf8273e11f8f09df724a658dc010 GIT Branch: SLE15-SP6-LTSS 2025-12-20 01:12:06 +0000	2025-12-23 08:01:55 +01:00
Kernel Bugs	ecce3df758	Add IGNORE-KABI-BADNESS	2025-12-22 08:12:38 +01:00
Kernel Bugs	f32c8c7ed1	GIT Revision: b59af1112963bf8273e11f8f09df724a658dc010 GIT Branch: SLE15-SP6-LTSS 2025-12-20 01:12:06 +0000	2025-12-22 08:12:37 +01:00
Kernel Bugs	2fcfec6b8d	Add IGNORE-KABI-BADNESS	2025-12-21 08:14:01 +01:00
Kernel Bugs	f1b471341d	GIT Revision: b59af1112963bf8273e11f8f09df724a658dc010 GIT Branch: SLE15-SP6-LTSS 2025-12-20 01:12:06 +0000	2025-12-21 08:14:01 +01:00
Kernel Bugs	338196442a	Add IGNORE-KABI-BADNESS	2025-12-20 08:15:24 +01:00
Kernel Bugs	a1b8da5626	GIT Revision: b59af1112963bf8273e11f8f09df724a658dc010 GIT Branch: SLE15-SP6-LTSS 2025-12-20 01:12:06 +0000	2025-12-20 08:15:23 +01:00
Kernel Bugs	7512121af8	Add IGNORE-KABI-BADNESS	2025-12-19 08:11:45 +01:00
Kernel Bugs	6c5901b9b3	GIT Revision: cb6efa32418d672c9f9a88896b58d2a5636300b1 GIT Branch: SLE15-SP6-LTSS 2025-12-19 01:32:01 +0000	2025-12-19 08:11:44 +01:00
Kernel Bugs	979dae1a9b	Add IGNORE-KABI-BADNESS	2025-12-18 08:16:42 +01:00
Kernel Bugs	7bf106c545	GIT Revision: b9011f698cf0e8b3578d6469ed96d24d5d6776e9 GIT Branch: SLE15-SP6-LTSS 2025-12-17 00:58:29 +0000	2025-12-18 08:16:39 +01:00
Kernel Bugs	2c529c3dd4	Update .gitattributes	2025-12-18 08:16:30 +01:00